build: integrate Coverity scanning into the Travis CI build

Signed-off-by: Paul Moore <paul@paul-moore.com>
(imported from commit 15fd61a)

.travis.yml

@@ -16,6 +16,14 @@ compiler:
   - gcc
 
 addons:
+  coverity_scan:
+    project:
+      name: "seccomp/libseccomp"
+      description: "Build submitted via Travis CI"
+    notification_email: paul@paul-moore.com
+    build_command_prepend: "./configure; make clean"
+    build_command: "make check-build"
+    branch_pattern: coverity-scan
   apt:
     packages:
       - build-essential
@@ -26,6 +34,12 @@ addons:
       - clang
       - lcov
 
+env:
+  global:
+    # The next declaration is the encrypted COVERITY_SCAN_TOKEN, created
+    #   via the "travis encrypt" command using the project repo's public key
+    - secure: "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"
+
 # resolve any remaining dependency issues
 before_install:
   # ubuntu 14.04 (trusty) has an old version of cython
@@ -36,11 +50,13 @@ before_install:
 # perform the build and fail immediately on error
 install:
   - ./autogen.sh
-  - ./configure --enable-python
-  - make check-build
+
+# NOTE: the coverity_scan plugin runs between "install" and "script"
 
 # run all of the tests independently, fail if any of the tests error
 script:
+  - ./configure --enable-python
+  - make check-build
   - LIBSECCOMP_TSTCFG_STRESSCNT=5 make check
   - LIBSECCOMP_TSTCFG_TYPE=live make -C tests check
   # ubuntu 14.04 (trusty) clang has problems with the cython generated code